StudyToCert

All certifications / AZ-802 / Lessons

Microsoft Certified: Windows Server Administrator Associate (exam AZ-802: Administering Windows Server) AZ-802 · Domain 6: Secure Windows Server infrastructure

Windows LAPS: backing up local admin passwords to AD DS or Entra ID, rotation and retrieval permissions

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

If every server shares the same local Administrator password, one compromised server gives an attacker the key to all of them. Windows Local Administrator Password Solution (Windows LAPS) fixes this by giving every device a unique, random, regularly rotated local admin password and storing it securely in a directory where authorized people can retrieve it. Windows LAPS is built into supported Windows and Windows Server versions through updates; you don't install an agent. It replaces the older, separately installed legacy Microsoft LAPS, and uses different AD attributes.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 4 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study AZ-802 for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the AZ-802 study plan